Total 3 procurement engineer job vacancies in Legal / Public / Security category in D08 Little India

• Able to implement a security architecture blueprint (from devsecops, application, infrastructure, operational security, for applications to interact with).

• Define the process, provisioning, interfaces and provide recommendations.
• Access management and control.
• Engage and execute Security Vulnerability Scanning activities (HCR/NVA/Pen Test/ SAST/DAST activities etc) and resolve findings.
• Manage Access management and SIEM tools in the environment.
• Facilitate auditing processes conducted by external parties.
• Familiar with operational security processes
o OS level patching
o Application-level patching
o Operational housekeeping and archival.
o Server and application hardening procedure & steps
o IM8 policy
o Vulnerability Assessment
o Security Incident detection and reporting
o SSL certificate renewal

Technologies & Skills Required
• OS Administration (Linux / Windows)
• IBM Security Verify Access
• IBM Qradar
• Thales HSM
• OpenSSL
• Tenable Nessus, Burp Suite Enterprise

Top 3 MUST have skills:
• Minimum 2+ years of experience with IT Security.
• CISSP/CCSP/CCSK certification or its equivalent is preferred
• 1-2 areas of Cyber Security domains such as Identity Access Management, Security and Risk Management, Application and Network security, Vulnerability Management with a broad understanding of other areas.


Good to have skills (Optional)
• Familiar with Singapore Government standards of security posture including planning and running SSAT, Security Compliance Check, Security Vulnerability Scanning, DAST & SAST.
• Work with security tools & environment.

Job Summary:

We are seeking a highly skilled and experienced Cyber Security Engineer specializing in Data Loss Prevention (DLP) to join our professional services team. As a Cyber Security Engineer (DLP), you will

be responsible for implementing and maintaining effective DLP solutions to protect our clients' sensitive data from unauthorized disclosure or loss. You will collaborate with cross-functional teams to assess data risks, design DLP strategies, and deploy and manage DLP technologies and processes.

Responsibilities:

• Implement, and maintain Data Loss Prevention (DLP) solutions for network and endpoint environments to protect sensitive data from unauthorized disclosure, loss, or leakage.
• Configure and deploy DLP policies, rules, and alerts within network and endpoint DLP platforms.
• Collaborate with cross-functional teams, including IT, Legal, and Compliance, to align DLP strategies with regulatory requirements and industry standards.
• Conduct data discovery and classification exercises to identify and categorize sensitive data across the organization.
• Integrate DLP solutions with existing security infrastructure, including firewalls, proxies, and endpoint protection systems.
• Stay up-to-date with the latest trends and developments in DLP technologies, data protection regulations, and industry best practices.
• Document DLP configurations, procedures, and troubleshooting guides for knowledge sharing and future reference.

For Senior position include the following responsibilities: -

• Develop and deliver DLP training and awareness programs to educate Junior teammates on data security best practices and policy compliance.

Qualifications:

• Bachelor's degree in Computer Science, Information Security, or a related field. Relevant certifications (CISSP, CISM, Certified DLP Professional) are highly desirable.
• Strong technical knowledge and hands-on experience with leading DLP platforms such as Symantec DLP, McAfee DLP, or Forcepoint DLP.
• In-depth knowledge of DLP concepts, methodologies, and tools, including content analysis, data classification, and network and endpoint DLP solutions.
• Familiarity with network protocols, endpoint security technologies, and data protection regulations (GDPR, CCPA, ISO 27001).
• Proficient in configuring DLP policies, rules, and alerts to enforce data protection policies and prevent data loss.
• Experience with data discovery and classification tools to identify sensitive data and define appropriate protection measures.
• Excellent analytical and problem-solving skills to identify and address DLP risks and incidents effectively.
• Strong communication and collaboration skills to work effectively with clients, cross-functional teams, and stakeholders.
• Ability to work independently, manage multiple projects simultaneously, and meet deadlines.

We offer a competitive salary, benefits package, and opportunities for professional growth and development. Interested applicants may send your CV to [email protected], kindly note that only selected candidates will be contacted.

Job description:

· Consistent and regular attendance is an essential function of this job.

· Detect, respond and / or escalate issues with CSOC tools in a timely fashion.

· Maintain and review CSOC tools so that they continue to be effective in detecting cyber threats.

· Operationalize new tools introduced as part of Global CSOC initiatives environment.

· Review and update Cyber Security Operations Engineering runbooks timely.

· Collect, review and analyze Cyber Security Operations Engineering metrics and trending, including the health of the security monitoring systems timely.

· Ensure IT compliance within CSOC tools.

· Ensure CSOC tools compliance to regulatory requirements.

· Coordinate with other stakeholders to resolve cases, where required.

· Support CSOC in reviewing, enhancing and updating tools used by CSOC.

· Performs other related duties as assigned.

· On-call for any technical issues affecting the availability of CSOC tools.

Requirements

· Degree or Diploma with at least 2-5 years of work experience in supporting, reviewing and administering tools used in a Global CSOC environment.

· Professional cyber security engineering / tool related membership / certification is required.

· Experience in Integrated Resort, Banking or Critical Infrastructure InfoComm Industry is preferred, but not a must.

· Proven effective verbal and written communication skills.

Skills required:

· Applying host/network access controls (e.g., access control list).

· Tuning sensors / tools

· Using incident handling methodologies.

· Securing network communications.

· Protecting a network against malware. (e.g., NIPS, anti-malware, restrict/prevent external devices, spam filters).

· Troubleshooting and diagnosing cyber defense infrastructure anomalies and work through resolution.

· Applying cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).

· System, network, and OS hardening techniques. (e.g., remove unnecessary services, password policies, network segmentation, enable logging, least privilege.